PDI Health 2025 Data Breach
ObscureIQ Breach Intelligence
High SeverityWebsite / service breach
PDI Health Mobile Diagnostic Imaging Breach (2025): Patient Radiology Results, SSN & Medical Records Exposed via Everest Ransomware
Mobile diagnostic imaging company serving healthcare facilities and home settings.
Verified by ObscureIQ Intelligence
86/100Breach Risk Index
57Data Value
40Market Recency
360dSince Breach
Breach Intelligence Summary
Entity: PDI Health · Actor: Everest · Sources: 2 references
Attack: Ransomware / Extortion
Profile: Healthcare provider · Diagnostic imaging services · Mobile healthcare provider · USA
Timeline: Breach (2025-05-14) · Year (2025)
Exposure: 27K records · 8 fields: Date of Birth, Email Address, Full Name, Lab Results, Medical Diagnosis, Phone Number, Physical Address, Social Security Number
Status: Confirmed
Executive Summary
PDI Health, a Brooklyn-based mobile diagnostic-imaging provider, surfaced on the Everest ransomware leak site on May 14, 2025. Everest claimed to have exfiltrated more than 373,000 patient records, including radiology test results, clinical histories, EMRs, and billing files, publishing sample data before dumping the full trove on June 18, 2025. Exposed data reportedly included names, addresses, phone numbers, dates of birth, Social Security numbers, diagnostic/imaging results, and billing information. PDI Health had not confirmed the incident or filed with HHS as of the latest reporting; the ~26,552 count reflects a DataBreach.com distinct-record parse, while Everest claimed 373,453 records. The breach is catalogued by DataBreach.com.
ObscureIQ assessment: High risk of identity theft, medical fraud, and health-related phishing. Imaging and referral data may also reveal sensitive treatment status and provider relationships.
Breach Impact
The leaked trove combined irreversible clinical data (radiology results, clinical histories, EMRs) with Social Security numbers and billing records, creating lasting medical-identity-theft, insurance-fraud, and privacy harm. Because imaging results reveal diagnostic findings, exposure carries added potential for embarrassment or targeted scams, and the lack of formal notification left patients reliant on third-party reporting.
About PDI Health
PDI Health is a Brooklyn, New York-based provider of mobile diagnostic-imaging services (including X-ray, ultrasound, and related testing) delivered on-site to healthcare facilities, nursing homes, and patients in home settings. It maintains patient identity, ordering-provider, clinical-history, imaging-result, insurance, and billing records to support mobile testing and reporting.
Why They Hold Your Data
Diagnostic imaging providers collect patient identity, contact, insurance, billing, appointment, physician-order, and imaging-service records across mobile and facility-based healthcare workflows.
Recent Developments
PDI Health has not publicly confirmed the incident, notified patients, or appeared on the HHS breach portal as of the latest reporting, leaving figures based on the threat actor’s claims. Multiple class-action law firms have opened investigations.
Data Points Exposed
8 verified field types
Date of Birth High
Email Address
Full Name High
Lab Results
Medical Diagnosis Critical
Phone Number
Physical Address High
Social Security Number Critical
Field names are shown in full for clarity and search visibility. Canonical machine keys are emitted only in this page’s structured data.
Exploitation & Downstream Threats
Threat Activity:Critical
Primary downstream threats:
- Medical identity fraud and insurance abuse using imaging results and clinical histories
- Identity theft and synthetic identity construction using SSN and DOB
- Extortion or embarrassment from exposure of diagnostic/imaging findings
- Targeted phishing and vishing referencing medical imaging or billing
- Doxxing and physical targeting from exposed home addresses
Threat vectors:
- Medical extortion, insurance fraud & discrimination
- Full identity theft & synthetic identity fraud
- Name-based social engineering
- SIM swapping, vishing & SMS phishing
- Physical stalking, mail fraud & identity verification
- Home targeting, stalking & physical threat
Threat Actor: Everest
Everest
Ransomware / Extortion
Attribution and method are based on available breach intelligence. Reported attack vector: Ransomware / Extortion.
Recommended Actions
If you believe your information may be included:
Protect Your ID Documents
Government-ID exposure enables document fraud — monitor and report misuse.
Enable MFA Everywhere
Turn on multi-factor authentication on email first, then financial accounts.
Report & Recover
If you spot misuse, start an official recovery plan and report fraud.
Frequently Asked Questions
What happened in the PDI Health breach?▾
PDI Health, a Brooklyn-based mobile diagnostic-imaging provider, surfaced on the Everest ransomware leak site on May 14, 2025. Everest claimed to have exfiltrated more than 373,000 patient records, including radiology test results, clinical histories, EMRs, and billing files, publishing sample data…
What data was exposed?▾
Verified fields include Date of Birth, Email Address, Full Name, Lab Results, Medical Diagnosis, Phone Number, Physical Address, Social Security Number.
What should I do if I was affected?▾
Change reused passwords, enable MFA, and (if identity or financial data is involved) freeze your credit and monitor your accounts.
Sources & References
Every claim on this page is traceable. This breach draws on:
Breach Index
ObscureIQ Intelligence
ObscureIQ proprietary analysis
Protect Yourself
Check If You're Affected
Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation